Exploit for Incorrect Authorization in Apache Ofbiz CVE-2024-38856 CVE-2024-23692

## https://sploitus.com/exploit?id=09DA71FF-92D1-54E0-B8ED-140E52A9BD1B
# CVE-2024-38856-EXP

---

<br>

```bash
bash CVE-2024-23692.sh <url> <command>
```

<br>

![2024_08_22_11_40_23.png](2024_08_22_11_40_23.png)

<br>

---

<br>

Nuclei

```bash
nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt

# or

nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt
```

<br>

![2024_08_22_11_49_01.png](2024_08_22_11_49_01.png)